Listing of Claims: 

1. (Currently Amended) An asymmetrical cryptographic method ef for protecting a hard- 
wired electronic logic chip against fraud in transactions between the electronic chip and an 
application, including calculating an authentication value V from input parameters in the 
electronic chip, said method comprising the steps of: 

producing a pseudo-random number r at the application prior to a 

transaction; 

calculating a corresponding parameter x at the application prior to the 
transaction, said parameter _x being linked to the pseudo-random number r by a 
mathematical relationship; 

storing the parameter x in a data memory of the electronic chip prior to the 
transaction; 

[[- 1)]] producing, at the chip,, producing a the pseudo-random number r 
specific to the transaction by means of via a serial pseudo-random generator 
included in the chip, said chip reading the stored parameter x calculated by the 
application prior to the transaction; 

[[- 2)]] sending from the chip sending to the application [[a]] the 
parameter x calculated by the application prior to the transaction, which is linked 
to the random pseudo-random number r by [[a]] the mathematical relationship^,]] 
and stored in [[a]] the data memory of the chip[[,]]; 

[[- 3)]] calculating, at the chip^ calculating a parameter y constituting the 
whole an entire or a portion of the authentication value V by means of via a serial 
function whose input parameters are at least the random number r specific to the 
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transaction and a private key s belonging to an asymmetrical pair of keys[[,]]; 

[[- 4)]] the chip sending the authentication value V from the chip to the 
application^,]]; and 

[[- 5)]] verifying, at the application^ verifying said authentication value V 
by means of via a verification function whose input parameters consist 
exclusively of public parameters including at least the a public key j>. 

2. (Currently Amended) A The method according to claim 1, wherein producing the 
random number r specific to the transaction comprises: 

[[-]] mixing some or all of the input parameters by means of via a mixing 
function and supplying a series of bits as the an output of the mixing function[[,]]; 

[[-]] changing the a state of a finite state automaton from an old state to a 
new state in accordance with a function depending at least on the old state and a 
value of the series of bits[[,]]; and 

[[-]] determining a series of random bits to form the whole an entire or a 
portion of the random number r by means of via an output function having input 
arguments including at least [[a]] the state of the automaton. 

3. (Currently Amended) A The method according to claim 2, wherein one input 
parameter is a secrete secret key K shared by the chip and the application and is stored in a 
protected memory region of the chip. 
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4. (Currently Amended) A The method according to claim 1, wherein the mathematical 
relationship comprises a function g r in a set G of items g provided with an operation having at 
least the an associative property, of being associative [[.]] 

5. (Currently Amended) A The method according to claim 4, wherein the set G is the a 
group Z n * of positive or null integers less than n and prime with n, wherein n is a positive integer . 

6. (Currently Amended) A The method according to claim 4, wherein the set G is any 
elliptical curve constructed on any finite body. 

7. (Currently Amended) A The method according to claim 1, wherein the serial function 
is an arithmetical function executing operations from a list comprising addition, subtraction, and 
[[left-]] left-shifts or right-shifts. 

8. (Currently Amended) A The method according to claim 7, wherein the arithmetical 
function executes only addition. 

9. (Currently Amended) A The method according to claim 7, wherein the arithmetical 
function executes only subtraction. 
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10. (Currently Amended) A The method according to claim 7, wherein the arithmetical 
function input arguments further include input parameters and the arithmetical function entails 
executing one of the operations y = r and y = r + s as a function of the a value assigned by the 
application to an input parameter t of the serial function. 

11. (Currently Amended) A The method according to claim 10, wherein the mathematical 
relationship comprises a verification function g r in a set G of items g provided with an operation 
having at least an associative the property of being associative and wherein the verification 
function compares the a result obtained by applying the verification function to the 
authentication value V with either the value x or the product of the value x and the public key g 
of the chip corresponding to its secret key s, as a function of the parameter t, which amounts to 
comprises testing one of the equations g y = x and g y = xp, as a function of the value of the 
parameter t, where y is equal to the authentication value V and q is the public key of the chip 
corresponding to its secret key s, as defined by the function p = g s . 

12. (Currently Amended) A The method according to claim 7, wherein the arithmetical 
function has^ for further input arguments^ input parameters and comprises executing the 
operation y = r or the operation y = r - s as a function of the a value assigned by the application 
to an input parameter t of the serial function. 

13. (Currently Amended) A The method according to claim 12, wherein the mathematical 
equation comprises a verification function g r in a set G of items g provided with an operation 
having at least the property of being associative and wherein the verification function compares 
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the result obtained by applying the mathematical equation relationship to the authentication value 
V with the value x or with the product of the value x and the public key p of the chip 
corresponding to its secret key s, as a function of the value of the parameter t, which amounts to 
comprises testing the equation g y = x or the equation g y .p = x, as a function of the value of the 
parameter t, where y is equal to the authentication value V and p is the public key of the chip 
corresponding to its secret key s, as defined by the equation p = g s . 

14. (Currently Amended) A The method according to claim 7, wherein the arithmetical 
function relationship has,, for further input arguments,, input parameters and comprises executing 
the operation y = r + 2's as a function of the a value assigned by the application to an input 
parameter t of the serial function, said parameter t comprising a string of m bits in which only 
one bit ti is equal to 1, m being a natural integer. 

15. (Currently Amended) A The method according to claim 14, wherein the mathematical 
relationship comprises a verification function g r in a set G of items g provided with an operation 
having at least an associative the property of being associative and wherein the verification 

function tests the equation g y = xp , as a function of the value of the parameter t, where y is 
equal to the authentication value V and p is the public key of the chip corresponding to its secret 
key s, as defined by the function p = g s . 
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16. (Currently Amended) A The method according to claim 7, wherein the arithmetical 
function has for^ further input arguments^ input parameters and comprises executing the 
operation y = r + 2 l s as a function of the value assigned by the application to an input parameter t 
of the serial function. 

17. (Currently Amended) A The method according to claim 16, wherein the mathematical 
relationship comprises a verification function g r in a set G of items g provided with an operation 
having at least the an associative property of being associative and wherein the verification 

function tests the equation g y = xp 2 ' , as a function of the value of the parameter t, where y is 

equal to the authentication value V and q is the public key of the chip corresponding to its secret 
key s, as defined by the function p = g s . 

18. (Currently Amended) A The method according to claim 7, wherein the arithmetical 
function has^ for further input arguments^ input parameters and executes the operation y = r + ts 
as a function of the value assigned by the application to an input parameter t of the serial 
function, where t is an integer. 

19. (Currently Amended) A The method according to claim 18, wherein the mathematical 
relationship comprises a verification function g r in a set G of items g provided with an operation 
having at least (he an associative property of being associative and wherein the verification 
function compares the result obtained by applying the verification function to the authentication 
value V with the value x or the product of the value x and the public key p of the chip 
corresponding to its secret key s, as a function of the value of the parameter t, which amounts to 
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comprises testing the equation g y = xp\ as a function of the value of the parameter t, where y is 
equal to the authentication value V and p is the public key of the chip corresponding to its secret 
key s, as defined by the function p = g s . 

20. (Currently Amended) A The method according to claim 1, wherein the parameter x 
sent from the chip to the application is the r e sult of a result obtained by applying a hashing 
function to at least one item linked to the random number r by a mathematical relationship 
function and to an optional field D containing data linked to the application. 

21. (Currently Amended) A The method according to claim 20, wherein the arithmetical 
function has 2 for further input arguments,, input parameters and executes the operation y = r + 2 ! s 
as a function of the value assigned by the application to an input parameter t of the serial 
function, said parameter t comprising a string of m bits in which only one bit tj is equal to 1, 
where m is a natural integer. 

22. (Currently Amended) A The method according to claim 21, wherein the mathematical 
relationship comprises a verification function g r in a set G of items g provided with an operation 
having at least an associative (he property of being associative and wherein the verification 

function tests the e quation relationship h(g y /p 2 ' ,D) = x, as a function of the value of the 
parameter t, where y is equal to the authentication value V and q is the public key of the chip 
corresponding to its secret key s, as defined by the function p = g s . 
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23. (Currently Amended) A The method according to claim 21, wherein the mathematical 
relationship comprises a verification function g r in a set G of items g provided with an operation 
having at least an associative the property of being associative and wherein the verification 

function tests the equation relationship h(g y . p ,D) = x, where y is equal to the authentication 
value V and q is the public key of the chip corresponding to its secret key s, as defined by the 
function p = g' s . 

24. (Currently Amended) A The method according to claim 20, wherein the arithmetical 
function has^ for further input arguments^ input parameters and executes the operation y = r - 2's 
as a function of the value assigned by the application to an input parameter t of the serial 
function, said parameter t comprising a string of m bits in which only one bit ti is equal to 1, 
where m is a natural integer. 

25. (Currently Amended) A The method according to claim 24, wherein the mathematical 
relationship comprises a verification function g r in a set G of items g provided with an operation 
having at least the an associative property of being associative and wherein the verification 

function tests the equation relationship h(g y .p ,D) = x, where y is equal to the authentication 
value V and £ is the public key of the chip corresponding to its secret key s, as defined by the 
function p = g" s . 
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26. (Currently Amended) A The method according to claim 20, wherein the mathematical 
function comprises a verification function g r in a set G of items g provided with an operation 
having at least the an associative property of being associative and wherein the parameter x sent 
from the chip to the application is the result of a result obtained by applying a relationship of the 
type x = h(g r ,D), where D designates an optional field containing data linked to the application 
and h is the hashing function. 

27. (Currently Amended) A The method according to claim 26, wherein the serial 
function has input arguments in th e form of comprised of input parameters and executes either 
the operation y = r or the operation y = r + s as a function of the value assigned by the 
application to an input parameter t of the serial function and wherein the verification function 
compares the value x to the value h(g y ,D) or the value h(g y .p,D) as a function of the value of the 
parameter t, where y is equal to the authentication value V and p is the public key of the chip 
corresponding to its secret key s, as defined by the equation p = g" s . 

28. (Currently Amended) A The method according to claim 26, wherein the serial 
function has A for input arguments^ input parameters and executes either one of the operation y = r 
er and the operation y = r + s as a function of the value assigned by the application to an input 
parameter t of the serial function and wherein the verification function compares the value x to 
the value h(g y ,D) or the value h(g y .p,D) as a function of the value of the parameter t, where y is 
equal to the authentication value V and p is the public key of the chip corresponding to its secret 
key s, as defined by the equation p = g" s . 
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29. (Currently Amended) A The method according to claim 26, wherein the serial 
function has A for input arguments^ input parameters and executes either one of the operation y = r 
e* and the operation y = r - s as a function of the value assigned by the application to an input 
parameter t of the serial function and wherein the verification function compares the value x to 
the value h(g y ,D) or the value h(g y .p,D) as a function of the value of the parameter t, where y is 
equal to the authentication value V and p is the public key of the chip corresponding to its secret 
key s, as defined by the equation p = g s . 

30. (Currently Amended) A The method according to claim 7, wherein the set G is the 
group Z n * of positive or null integers less than n and prime with n. 

31. (Currently Amended) A The method according to claim 7, wherein the set G is any 
elliptical curve constructed on any finite body. 

32. (Currently Amended) A device including an electronic chip according to claim 1 and 
adapted configured to implement an asymmetrical cryptographic method ef for protecting the 
electronic chip against fraud in transactions between the electronic chip and an application, said 
chip reading one or more stored values of a parameter x calculated prior to a transaction by the 
application, and said parameter x being linked by a mathematical relationship to a value of a 
random number r, the method comprising the electronic chip calculating an authentication value 
V from input parameters, and said device comprising: 

[[-]] a serial pseudo-random generator for producing a random number r 
specific to the transaction^,]]; 
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[[-]] first memory means for storing the one or more values of the 
parameter x calculated prior to the transaction by the application and which are 
linked by [[a]] the mathematical relationship to the value of the random number 
r[[JL 

[[-]] means for sending the parameter x linked to the random number r 
specific to the transaction from the chip to the application^,]]; 

[[-]] means for executing a serial function having as input parameters at 
least the random number r specific to the transaction and a private key s belonging 
to an asymmetrical pair of keys and providing as output a parameter y[[ J]; and 

[[-]] output means adapted configured to construct the an authentication 
value V from at least the parameter y. 

33. (Currently Amended) A verification device for executing an asymmetrical 
cryptographic method ef for protecting an electronic chip according to claim 1 against fraud in 
transactions between the electronic chip and an application , said chip reading one or more stored 
values of a parameter x calculated prior to a transaction by the application, and said parameter x 
being linked by a mathematical relationship to a value of a random number r, said method 
comprising verifying an authentication value V calculated by the electronic chip from 
exclusively public parameters and said verification device comprising means for executing the 
verification function taking as based on input which comprises at least the authentication value V 
and the a public key p. 
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